Volt Typhoon is wreaking havoc again - this time on US internet providers
Briefly

"Director servers enable the orchestration of Versa's SD-WAN functionality, positioning them as a critical and attractive target for threat actors seeking to extend their reach within enterprise network management."
"CVE-2024-39717, designated a 7.2 rating on the CVSS, is a dangerous file type upload vulnerability where attackers manipulate the software's 'change favicon' option to remotely upload and execute a malicious java file masked as a PNG image."
Read at ITPro
[
]
[
|
]